Once again, Acronis proves why it’s a leader in cybersecurity. Its solution, Acronis Cyber Protect Cloud, has just been recognized by AV-TEST for its outstanding endpoint protection performance, earning a perfect score in the Advanced Threat Protection (ATP) evaluation for March–April 2025.
Why is this test so significant? Because it wasn’t a traditional malware detection assessment. This evaluation was much more realistic and challenging: it simulated advanced fileless attacks, using scenarios where attackers exploit legitimate system tools like MSBuild—the Microsoft build engine commonly used in development environments.
What made this test different?
In this round, AV-TEST designed scenarios that mimicked real-world threats. All the attacks used a single technique: abusing MSBuild, a common Windows tool that is typically harmless. However, attackers have learned to hide malicious code inside project files like .proj or .csproj, executing it directly from memory without leaving a trace on the disk.
The result: a “fileless” attack, invisible to many traditional antivirus solutions. These types of threats fall under the so-called “living off the land” techniques, where hackers use legitimate operating system tools to evade detection.
What’s impressive is that Acronis blocked 100% of these attacks without generating a single false positive. That means maximum protection without disrupting day-to-day work—a true feat in modern cybersecurity.
How was the AV-TEST evaluation conducted? Here’s the methodology
To truly test the defense capabilities of cybersecurity solutions, AV-TEST designed 10 distinct attack scenarios. Five of them simulated ransomware infections, while the other five focused on infostealer-type malware—threats designed to steal sensitive data.
All attacks used MSBuild as the delivery method, a technique increasingly common in real-world incidents. The infections were executed using plausible methods, such as opening email attachments or slightly modified malicious scripts, mimicking what could happen on any given day in a company.
How was each solution scored?
Each security product was evaluated based on its ability to stop the attack at each stage of the execution chain. In the case of ransomware, the maximum score per attack was 3 points:
-
1 point for detecting the threat
-
2 points if partial encryption was blocked
-
3 points if file encryption was completely prevented
For data theft attacks, the scale extended to 4 points, adding an extra point if the product was able to prevent data exfiltration.
The highest possible score was 35 points—and Acronis achieved them all. This means that Acronis Cyber Protect Cloud successfully prevented both file encryption and data theft in every scenario. A flawless, comprehensive defense. A clear demonstration that its holistic approach truly works against the most sophisticated threats.
Read more: Acronis True Image Shines in AV-TEST Certification
Why Does This Result Matter So Much?
What’s impressive about Acronis’ achievement is not just that it detected the attacks, but that it completely stopped them. We’re talking about fileless threats—attacks that leave no visible or easily analyzed traces. In these cases, blocking the malicious payload directly in memory requires more than a standard antivirus; it demands advanced behavioral analysis and real-time protection.
And that’s exactly what Acronis delivered. This type of evaluation tests how a security solution responds to the tactics used by modern attackers: stealthy techniques that leverage legitimate system tools (like MSBuild) to slip past traditional antivirus software—or even some EDRs.
What Does This Mean for Businesses?
For IT security teams or any company needing protection against the most sophisticated and elusive threats, this evaluation is compelling proof. It shows that Acronis Cyber Protect Cloud provides total protection—even against malware that runs directly in memory or abuses legitimate OS tools to go unnoticed.
Conclusion: When the Threat Is Invisible, Acronis Still Sees Everything
The AV-TEST ATP evaluation for March–April 2025 was no ordinary test. Using MSBuild as the attack vector was spot-on: it perfectly simulates the kind of stealthy, sophisticated, and very real threats that many traditional solutions fail to stop.
And the results speak for themselves: Acronis was one of only four vendors to achieve a perfect score (35/35). In no case were files encrypted. In no scenario was data exfiltrated. And in such a demanding environment, that’s a major achievement. One thing is clear: as attackers evolve, so does Acronis.
At TecnetOne, we’re proud to be a Platinum Acronis Partner, which allows us to offer you Acronis Cyber Protect Cloud with all its advanced features, personalized support, and the confidence of working with certified experts. If your priority is complete security with solutions proven in real-world scenarios, you’ve come to the right place.
